[fragmede]

The article mentions Google was involved in the research, so they just went by the number of downloads of malware extensions on their store.